Lucene search
+L

8 matches found

NVD
NVD
•added 2020/10/01 2:15 a.m.•27 views

CVE-2019-20902

Upgrading Crowd via XML Data Transfer can reactivate a disabled user from OpenLDAP. The affected versions are from before version 3.4.6 and from 3.5.0 before 3.5.1...

7.5CVSS0.00872EPSS
SaveExploits0References1
OSV
OSV
•added 2020/10/01 2:15 a.m.•12 views

CVE-2019-20902

Upgrading Crowd via XML Data Transfer can reactivate a disabled user from OpenLDAP. The affected versions are from before version 3.4.6 and from 3.5.0 before 3.5.1...

7.5CVSS7.1AI score0.00872EPSS
SaveExploits0References1
Prion
Prion
•added 2020/10/01 2:15 a.m.•32 views

Code injection

Upgrading Crowd via XML Data Transfer can reactivate a disabled user from OpenLDAP. The affected versions are from before version 3.4.6 and from 3.5.0 before 3.5.1...

5CVSS7.5AI score0.00872EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2020/10/01 1:30 a.m.•77 views

CVE-2019-20902

Summary: CVE-2019-20902 describes a vulnerability in Crowd where upgrading via XML Data Transfer can reactivate a disabled OpenLDAP user. The issue affects Crowd versions prior to 3.4.6 and 3.5.0 prior to 3.5.1; fixed in 3.4.6 and 3.5.1+ (per records). Impact/behavior: during upgrade, disabled Op...

7.5CVSS7.5AI score0.00872EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/10/01 1:30 a.m.•36 views

CVE-2019-20902

Upgrading Crowd via XML Data Transfer can reactivate a disabled user from OpenLDAP. The affected versions are from before version 3.4.6 and from 3.5.0 before 3.5.1...

7.5AI score0.00872EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/10/01 12:00 a.m.•3 views

CVE-2019-20902: Undefined Security Weakness

Upgrading Crowd via XML Data Transfer can reactivate a disabled user from OpenLDAP. The affected versions are from before version 3.4.6 and from 3.5.0 before 3.5.1...

7.5CVSS5.7AI score0.00872EPSS
SaveExploits0References1
Atlassian
Atlassian
•added 2019/06/18 12:30 p.m.•157 views

Upgrading Crowd via XML Data Transfer reactivate disabled user from OpenLDAP - CVE-2019-20902

h3. Issue Summary Upgrading Crowd via XML Data Transfer can reactivate a disabled user from OpenLDAP. h3. Environment Crowd 3.x.x OpenLDAP h3. Steps to Reproduce Install Crowd 3.1.1 and connect with OpenLDAP directory. Synchronise the OpenLDAP directory. Disable one of the user from OpenLDAP...

7.5CVSS2.4AI score0.00872EPSS
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2019/06/18 12:30 p.m.•41 views

Upgrading Crowd via XML Data Transfer reactivate disabled user from OpenLDAP - CVE-2019-20902

h3. Issue Summary Upgrading Crowd via XML Data Transfer can reactivate a disabled user from OpenLDAP. h3. Environment Crowd 3.x.x OpenLDAP h3. Steps to Reproduce Install Crowd 3.1.1 and connect with OpenLDAP directory. Synchronise the OpenLDAP directory. Disable one of the user from OpenLDAP...

7.5CVSS2.4AI score0.00872EPSS
SaveExploits0
Rows per page
Query Builder